comisai 1.0.34 → 1.0.37

package/node_modules/@comis/skills/dist/builtin/install-detour.d.ts

@@ -0,0 +1,67 @@
+/**
+ * Install-detour parser: detect pip/npm/pnpm/yarn install commands that
+ * overlap connected MCP servers or visible prompt skills.
+ *
+ * Pure parser — no IO, no per-call state beyond inputs. Returns `null` on
+ * parser-bail (unbalanced quotes, no install form found, no overlap detected)
+ * to signal "let the command run unchanged."
+ *
+ * Consumed by:
+ * - packages/skills/src/builtin/exec-tool.ts (mode policy gate)
+ * - packages/skills/src/builtin/process-tool.ts (advise-mode retroactive hint)
+ * - packages/skills/src/builtin/process-registry.ts (InstallDetourDecision type for ProcessSession field)
+ *
+ * Privacy invariant: the parser produces only sanitized identifiers
+ * (`commandDigest`, `packages[].normalizedName`, `overlaps[].sourceName`).
+ * Raw command text NEVER leaves this module.
+ *
+ * @module
+ */
+import type { ToolCapabilityPort } from "@comis/core";
+/**
+ * One overlap entry — links a parsed install package back to the connected
+ * MCP server or visible prompt skill that should be used instead.
+ *
+ * The 4 `reason` literals are pinned to match the closed event shape at
+ * `packages/core/src/event-bus/events-agent.ts:120-159`. Do NOT add new
+ * literals here without updating the event type in core.
+ */
+export interface DetourOverlap {
+    /** Normalized package name (PEP-503 for python, lowercase + scope-preserving for npm). */
+    readonly packageName: string;
+    readonly sourceType: "mcp" | "skill";
+    /** Connected MCP server name OR visible prompt-skill name. Never a tool name. */
+    readonly sourceName: string;
+    /** Cluster (used by soft-stop error template; from getMcpServerHint/getSkillHint/getClusterConfig). */
+    readonly cluster?: string;
+    readonly reason: "direct-server-name" | "mcp-operator-alias" | "skill-comis-alias" | "skill-operator-alias";
+}
+/**
+ * Parser decision — returned non-null only when an install form was matched
+ * AND at least one overlap was detected. Returns `null` on every other path
+ * (parser-bail, no install form, no overlap), so callers branch via
+ * `if (decision !== null)` rather than checking `overlaps.length`.
+ */
+export interface InstallDetourDecision {
+    readonly packageManager: "pip" | "npm" | "pnpm" | "yarn";
+    /** Sorted alphabetically — required for `commandDigest` stability. */
+    readonly packages: readonly string[];
+    readonly overlaps: readonly DetourOverlap[];
+    /** SHA-256 of `${packageManager}:${sortedPackages.join(",")}` truncated to 16 hex chars. */
+    readonly commandDigest: string;
+}
+/**
+ * Parse a shell command for install-detour overlap. Pure function — no IO,
+ * no module state, no memoization. Built fresh per call from the port's
+ * runtime state to avoid the skill-visibility race.
+ *
+ * Returns `null` when:
+ * - `splitTopLevelSegments` bails (unbalanced quotes anywhere)
+ * - No top-level segment matches the leading-token rule
+ * - The matched segment yields no parsed packages after token classification
+ * - `overlaps.length === 0` (no detected overlap)
+ *
+ * @param command - Raw shell command (caller passes verbatim — parser does not sanitize)
+ * @param port - ToolCapabilityPort (runtime view of connected servers + visible skills)
+ */
+export declare function parseInstallDetour(command: string, port: ToolCapabilityPort): InstallDetourDecision | null;

package/node_modules/@comis/skills/dist/builtin/install-detour.js

@@ -0,0 +1,342 @@
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * Install-detour parser: detect pip/npm/pnpm/yarn install commands that
+ * overlap connected MCP servers or visible prompt skills.
+ *
+ * Pure parser — no IO, no per-call state beyond inputs. Returns `null` on
+ * parser-bail (unbalanced quotes, no install form found, no overlap detected)
+ * to signal "let the command run unchanged."
+ *
+ * Consumed by:
+ * - packages/skills/src/builtin/exec-tool.ts (mode policy gate)
+ * - packages/skills/src/builtin/process-tool.ts (advise-mode retroactive hint)
+ * - packages/skills/src/builtin/process-registry.ts (InstallDetourDecision type for ProcessSession field)
+ *
+ * Privacy invariant: the parser produces only sanitized identifiers
+ * (`commandDigest`, `packages[].normalizedName`, `overlaps[].sourceName`).
+ * Raw command text NEVER leaves this module.
+ *
+ * @module
+ */
+import { createHash } from "node:crypto";
+import { ShellQuoteTracker } from "./exec-security.js";
+// --------------------------------------------------------------------------
+// Public entry point
+// --------------------------------------------------------------------------
+/**
+ * Parse a shell command for install-detour overlap. Pure function — no IO,
+ * no module state, no memoization. Built fresh per call from the port's
+ * runtime state to avoid the skill-visibility race.
+ *
+ * Returns `null` when:
+ * - `splitTopLevelSegments` bails (unbalanced quotes anywhere)
+ * - No top-level segment matches the leading-token rule
+ * - The matched segment yields no parsed packages after token classification
+ * - `overlaps.length === 0` (no detected overlap)
+ *
+ * @param command - Raw shell command (caller passes verbatim — parser does not sanitize)
+ * @param port - ToolCapabilityPort (runtime view of connected servers + visible skills)
+ */
+export function parseInstallDetour(command, port) {
+    const segments = splitTopLevelSegments(command);
+    if (segments === null)
+        return null; // unbalanced quotes
+    // Try each top-level segment until one matches an install form
+    for (const segment of segments) {
+        const parsed = parseInstallSegment(segment);
+        if (parsed === null)
+            continue;
+        const { packageManager, rawPackages } = parsed;
+        // Token classification: drop URL/VCS/path/file specs; strip versions; keep registry names
+        const ecosystem = packageManager === "pip" ? "python" : "node";
+        const cleanedNames = [];
+        for (const tok of rawPackages) {
+            const cleaned = classifyPackageToken(tok, ecosystem);
+            if (cleaned !== null)
+                cleanedNames.push(cleaned);
+        }
+        if (cleanedNames.length === 0)
+            continue; // no install-target tokens
+        // Normalize names per ecosystem
+        const normalize = ecosystem === "python" ? normalizePythonName : normalizeNpmName;
+        const packages = [...new Set(cleanedNames.map(normalize))].sort();
+        if (packages.length === 0)
+            continue;
+        // Build alias map FRESH per call — no memoization (avoids skill-visibility race)
+        const { pythonAliases, npmAliases } = buildPackageAliasMap(port);
+        const aliasMap = ecosystem === "python" ? pythonAliases : npmAliases;
+        const connectedServersNorm = new Set(port.getConnectedMcpServers().map(normalize));
+        // Detect overlaps for each package: direct-server first, then alias-map
+        const overlaps = [];
+        for (const pkgN of packages) {
+            if (connectedServersNorm.has(pkgN)) {
+                // Find the original (un-normalized) server name for the sourceName field
+                const serverName = port.getConnectedMcpServers().find((s) => normalize(s) === pkgN);
+                if (serverName) {
+                    const hint = port.getMcpServerHint(serverName);
+                    overlaps.push({
+                        packageName: pkgN,
+                        sourceType: "mcp",
+                        sourceName: serverName,
+                        cluster: hint?.cluster,
+                        reason: "direct-server-name",
+                    });
+                    continue;
+                }
+            }
+            const aliasHit = aliasMap.get(pkgN);
+            if (aliasHit)
+                overlaps.push(aliasHit);
+        }
+        if (overlaps.length === 0)
+            return null; // no overlap → no event → run unchanged
+        // First-match-wins on segments: return on the first segment producing overlap
+        return {
+            packageManager,
+            packages,
+            overlaps,
+            commandDigest: buildCommandDigest(packageManager, packages),
+        };
+    }
+    return null; // no segment matched an install form
+}
+// --------------------------------------------------------------------------
+// Private helpers (NOT exported — internal to install-detour module)
+// --------------------------------------------------------------------------
+/**
+ * Split a command on top-level `;` `&&` `||` `|` `&` (outside quotes). Reuses
+ * `ShellQuoteTracker` from `exec-security.ts:21-74`. Returns `null` on
+ * unbalanced quotes anywhere — the parser-bail signal.
+ *
+ * Deliberately separate from `exec-security.ts:splitCommandSegments`:
+ * - Splits on `&` AS WELL — POSIX background-and-continue is a command terminator
+ *   (same operator class as `;`). See exec-security.ts:184 for the canonical reference.
+ * - Returns `null` on unbalanced quotes (vs returning collected-so-far).
+ * Two helpers, no shared abstraction (KISS-consistent).
+ */
+function splitTopLevelSegments(command) {
+    const tracker = new ShellQuoteTracker();
+    const segments = [];
+    let current = "";
+    for (let i = 0; i < command.length; i++) {
+        const ch = command[i];
+        if (!tracker.escaped && tracker.state === "NORMAL") {
+            // Two-char operators first
+            if (i + 1 < command.length) {
+                const two = ch + command[i + 1];
+                if (two === "&&" || two === "||") {
+                    segments.push(current.trim());
+                    current = "";
+                    i++; // skip second char
+                    continue;
+                }
+            }
+            // Single-char operators. `&` is a POSIX command terminator (background-and-continue),
+            // same class as `;` — see exec-security.ts:184. The two-char `&&` lookahead above
+            // runs first, so `&&` is never reached here.
+            if (ch === ";" || ch === "|" || ch === "&") {
+                segments.push(current.trim());
+                current = "";
+                continue;
+            }
+        }
+        tracker.feed(ch);
+        current += ch;
+    }
+    // Bail on unbalanced quotes
+    if (tracker.state !== "NORMAL" || tracker.escaped) {
+        return null;
+    }
+    segments.push(current.trim());
+    return segments.filter((s) => s.length > 0);
+}
+/**
+ * Identify the install form (if any) of a single top-level segment by its
+ * leading token. Returns the matched package manager + the raw remaining
+ * tokens (after the install verb) when a form is found.
+ *
+ * Leading-token rule — ONLY these forms are recognized:
+ *   pip install …
+ *   pip3 install …
+ *   python -m pip install …
+ *   python3 -m pip install …
+ *   npm install … | npm i … | npm add …
+ *   pnpm install … | pnpm add …
+ *   yarn add …
+ *
+ * Quoted strings, command substitution, heredocs, and `npx`/`pwsh -c`
+ * fall through to the `null` branch.
+ */
+function parseInstallSegment(segment) {
+    // Whitespace-tokenize the segment. We deliberately do NOT re-tokenize
+    // with quote-awareness here — the leading-token rule only inspects the
+    // first whitespace-delimited token, and shell quoting at this layer is
+    // already consistent (parent splitTopLevelSegments left us a balanced
+    // segment). This is the design's "no recursive descent" position.
+    const tokens = segment.split(/\s+/).filter((t) => t.length > 0);
+    if (tokens.length === 0)
+        return null;
+    const lead = tokens[0];
+    if (lead === "pip" || lead === "pip3") {
+        if (tokens[1] !== "install")
+            return null;
+        return { packageManager: "pip", rawPackages: tokens.slice(2) };
+    }
+    if (lead === "python" || lead === "python3") {
+        // python -m pip install …
+        if (tokens[1] !== "-m" || tokens[2] !== "pip" || tokens[3] !== "install")
+            return null;
+        return { packageManager: "pip", rawPackages: tokens.slice(4) };
+    }
+    if (lead === "npm") {
+        const verb = tokens[1];
+        if (verb !== "install" && verb !== "i" && verb !== "add")
+            return null;
+        return { packageManager: "npm", rawPackages: tokens.slice(2) };
+    }
+    if (lead === "pnpm") {
+        const verb = tokens[1];
+        if (verb !== "install" && verb !== "add")
+            return null;
+        return { packageManager: "pnpm", rawPackages: tokens.slice(2) };
+    }
+    if (lead === "yarn") {
+        if (tokens[1] !== "add")
+            return null;
+        return { packageManager: "yarn", rawPackages: tokens.slice(2) };
+    }
+    return null;
+}
+/**
+ * Classify one raw token from the install args:
+ * - Returns `null` if it's a flag (starts with `-`).
+ * - Returns `null` if it's URL/VCS/local-path/file spec.
+ * - Returns the package name with version stripped for unscoped names.
+ * - Preserves `@scope/name` and strips `@version` only at the SECOND `@`.
+ */
+function classifyPackageToken(token, ecosystem) {
+    if (token.startsWith("-"))
+        return null; // flag — skip
+    // URL / VCS / local-path / file spec rejection
+    if (token.includes("://") ||
+        token.startsWith("git+") ||
+        token.startsWith("file:") ||
+        token.startsWith("./") ||
+        token.startsWith("../") ||
+        token.endsWith(".tar.gz") ||
+        token.endsWith(".whl") ||
+        token.endsWith(".zip")) {
+        return null;
+    }
+    // Scoped npm preservation: @scope/name or @scope/name@1.2.3
+    if (ecosystem === "node" && token.startsWith("@")) {
+        const slashIdx = token.indexOf("/");
+        if (slashIdx <= 0)
+            return null; // malformed @scope without name
+        const afterSlash = token.slice(slashIdx + 1);
+        const versionAt = afterSlash.indexOf("@");
+        const namePart = versionAt >= 0
+            ? afterSlash.slice(0, versionAt)
+            : afterSlash;
+        if (namePart.length === 0)
+            return null;
+        return token.slice(0, slashIdx + 1) + namePart; // "@scope/name"
+    }
+    // Unscoped: strip version specifiers from the FIRST occurrence of
+    // any of `==`, `>=`, `<=`, `<`, `>`, `!=`, `~=`, or `@`.
+    const versionRegex = /(==|>=|<=|!=|~=|<|>|@)/;
+    const match = token.search(versionRegex);
+    const namePart = match >= 0 ? token.slice(0, match) : token;
+    if (namePart.length === 0)
+        return null;
+    return namePart;
+}
+/** PEP 503 strict normalization: lowercase + collapse `-`/`_`/`.` runs to single `-`. */
+function normalizePythonName(name) {
+    return name.toLowerCase().replace(/[-_.]+/g, "-");
+}
+/** npm: lowercase only; `@scope/name` preserved exactly. */
+function normalizeNpmName(name) {
+    return name.toLowerCase();
+}
+/**
+ * SHA-256 of `${pm}:${sortedPackages.join(",")}` truncated to 16 hex chars.
+ * Stable, order-insensitive, distinct for distinct PMs/packages.
+ * Mirrors `file-state-tracker.ts:160-163` crypto pattern + the
+ * `SYSTEM_PROMPT_HASH_LENGTH = 16` truncation convention from
+ * `packages/agent/src/context-engine/constants.ts:163`.
+ */
+function buildCommandDigest(pm, packages) {
+    const sorted = [...packages].sort();
+    return createHash("sha256")
+        .update(`${pm}:${sorted.join(",")}`)
+        .digest("hex")
+        .slice(0, 16);
+}
+/**
+ * Build per-call alias maps from the port's runtime view. NEVER memoize
+ * across calls — avoids the skill-visibility race.
+ *
+ * Two SEPARATE maps keyed by ecosystem to avoid cross-ecosystem aliasing
+ * collisions when an operator declares `replacesPackages: ["foo_bar"]`
+ * (Python normalizes to `foo-bar`; npm preserves `foo_bar`). The parser
+ * picks the appropriate map based on detected `packageManager`.
+ */
+function buildPackageAliasMap(port) {
+    const pythonAliases = new Map();
+    const npmAliases = new Map();
+    // 1. MCP operator hints (tooling.mcp.capabilityHints[*].replacesPackages)
+    for (const server of port.getConnectedMcpServers()) {
+        const hint = port.getMcpServerHint(server);
+        if (!hint)
+            continue;
+        for (const pkg of hint.replacesPackages) {
+            const overlap = {
+                packageName: pkg.toLowerCase(),
+                sourceType: "mcp",
+                sourceName: server,
+                cluster: hint.cluster,
+                reason: "mcp-operator-alias",
+            };
+            const pyKey = normalizePythonName(pkg);
+            const npmKey = normalizeNpmName(pkg);
+            if (!pythonAliases.has(pyKey)) {
+                pythonAliases.set(pyKey, { ...overlap, packageName: pyKey });
+            }
+            if (!npmAliases.has(npmKey)) {
+                npmAliases.set(npmKey, { ...overlap, packageName: npmKey });
+            }
+        }
+    }
+    // 2. Skill aliases (operator hints + comis.capability — both pre-merged
+    //    by port.getPromptSkillCapabilities()).
+    //    Visibility filter (allowed/denied/eligibility/disableModelInvocation)
+    //    is already applied at the port level — no re-filter here.
+    for (const skill of port.getPromptSkillCapabilities()) {
+        // Discriminate operator-alias vs comis-alias: if port.getSkillHint
+        // returns truthy for this skill, the operator hint is the source.
+        const operatorHint = port.getSkillHint(skill.name, skill.skillKey);
+        const reason = operatorHint
+            ? "skill-operator-alias"
+            : "skill-comis-alias";
+        for (const pkg of skill.replacesPackages) {
+            const overlap = {
+                packageName: pkg.toLowerCase(),
+                sourceType: "skill",
+                sourceName: skill.name,
+                cluster: skill.cluster,
+                reason,
+            };
+            const pyKey = normalizePythonName(pkg);
+            const npmKey = normalizeNpmName(pkg);
+            // first-source-wins precedence: MCP entries already in the map are not overwritten
+            if (!pythonAliases.has(pyKey)) {
+                pythonAliases.set(pyKey, { ...overlap, packageName: pyKey });
+            }
+            if (!npmAliases.has(npmKey)) {
+                npmAliases.set(npmKey, { ...overlap, packageName: npmKey });
+            }
+        }
+    }
+    return { pythonAliases, npmAliases };
+}

package/node_modules/@comis/skills/dist/builtin/platform/admin-manage-factory.js

@@ -19,11 +19,11 @@ import { jsonResult, readEnumParam, throwToolError, createTrustGuard, } from "./
  * `AgentToolResult` (multi-block content + typed `details`), so the factory
  * passes it through verbatim instead of re-wrapping via `jsonResult`.
  *
- * Used by `agents_manage.create` (260428-sw2 Layer 1) to emit a 2-text-block
- * tool_result: a high-attention next-step contract first, the JSON-rendered
- * RPC fields second. The 7 sibling admin manage tools (cron/heartbeat/
- * sessions/tokens/etc.) keep returning plain objects from their overrides --
- * they hit the `jsonResult` branch unchanged. Additive, zero-impact change.
+ * Used by `agents_manage.create` to emit a 2-text-block tool_result: a
+ * high-attention next-step contract first, the JSON-rendered RPC fields
+ * second. The 7 sibling admin manage tools (cron/heartbeat/sessions/tokens/
+ * etc.) keep returning plain objects from their overrides -- they hit the
+ * `jsonResult` branch unchanged. Additive, zero-impact change.
  */
 function isAgentToolResult(value) {
     return (typeof value === "object" &&

package/node_modules/@comis/skills/dist/builtin/platform/agents-manage-tool.d.ts

@@ -42,6 +42,7 @@ export declare const AgentsManageToolParams: Type.TObject<{
                 browser: Type.TOptional<Type.TBoolean>;
             }>>;
         }>>;
+        oauthProfiles: Type.TOptional<Type.TRecord<"^.*$", Type.TString>>;
     }>, Type.TString]>>;
 }>;
 export interface AgentInlineWritesValue {
@@ -62,19 +63,19 @@ export interface AgentInlineWritesError {
  * of the `agents_manage.create` tool_result. The freshest, uncached surface
  * the LLM reads on every turn -- pinned here to fix the silent-termination
  * bug where TOOL_GUIDE prescriptive text gets crowded out under high
- * parallel-tool-call load (production session 1a8b0d91 turn 13: 9 sub-agents
- * created in parallel, then a 0-text 0-thinking 0-tool turn).
+ * parallel-tool-call load (e.g. 9 sub-agents created in parallel followed
+ * by a 0-text 0-thinking 0-tool turn).
  *
  * Pure string composition. No I/O, no Result<T,E> needed (per AGENTS.md
  * §2.1: Result is for fallible paths only; this is infallible).
  *
- * Three branches keyed on `inlineWritesResult` (260428-vyf):
+ * Three branches keyed on `inlineWritesResult`:
  *  - BOTH written → SHORT contract: "No further setup needed — agent is
  *    operationally ready". Skips the post-create write() roundtrip.
  *  - PARTIAL (only one of role/identity written) → mixed contract pointing
  *    only at the still-template file with a single "Next required action".
- *  - NEITHER (or write failure / undefined) → existing 260428-sw2 2-step
- *    contract verbatim, telling the LLM to call write() for ROLE.md.
+ *  - NEITHER (or write failure / undefined) → existing 2-step contract
+ *    verbatim, telling the LLM to call write() for ROLE.md.
  *
  * Case B (workspaceDir absent — defensive fallback): shorter form pinning
  * "Customize {agentId}'s workspace ROLE.md and IDENTITY.md before using."
@@ -94,7 +95,7 @@ export declare function buildCreateContract(agentId: string, workspaceDir: strin
  *
  * @param rpcCall - RPC call function for delegating to the daemon backend
  * @param logger - Required structured logger. Used to emit a per-create
- *   INFO log pinning the next-step contract emission (260428-sw2 Layer 1).
+ *   INFO log pinning the next-step contract emission.
  *   Mirrors the gateway-tool required-logger position; no overload-with-
  *   default-logger compat shim (per `feedback_no_backward_compat.md`).
  * @param approvalGate - Optional approval gate for create/delete actions

package/node_modules/@comis/skills/dist/builtin/platform/agents-manage-tool.js

@@ -48,19 +48,19 @@ export const AgentsManageToolParams = Type.Object({
                     "Default: full. Can be changed later via update action. " +
                     "Alternative shape: nested workspace.profile (see `workspace` field).",
             })),
-            // 260428-oyc: declare nested workspace shape explicitly. The LLM
-            // sometimes emits `workspace: {profile: "specialist"}` directly
-            // (mirroring the downstream Zod schema-agent.ts:733-738 shape).
-            // Without this declaration, the unknown nested object slipped past
-            // TypeBox structurally but the enum was never validated -- invalid
-            // values would only be caught later at the Zod layer with a less
+            // Declare nested workspace shape explicitly. The LLM sometimes
+            // emits `workspace: {profile: "specialist"}` directly (mirroring
+            // the downstream Zod schema-agent.ts:733-738 shape). Without this
+            // declaration, the unknown nested object slipped past TypeBox
+            // structurally but the enum was never validated -- invalid values
+            // would only be caught later at the Zod layer with a less
             // actionable error path. Declaring it here makes both shapes
             // first-class and gates the enum at the tool-validation boundary.
             workspace: Type.Optional(Type.Object({
                 profile: Type.Union([Type.Literal("full"), Type.Literal("specialist")], {
                     description: "Workspace profile (alternative to flat workspace_profile). Valid: full | specialist ONLY. NO other values accepted.",
                 }),
-                // 260428-vyf L2: inline ROLE.md / IDENTITY.md content. The tool
+                // Inline ROLE.md / IDENTITY.md content. The tool
                 // handler strips these from the config payload BEFORE the RPC
                 // and forwards them as a separate top-level `inlineContent`
                 // param. The daemon writes them as files (write-once side-
@@ -95,6 +95,17 @@ export const AgentsManageToolParams = Type.Object({
                     browser: Type.Optional(Type.Boolean({ description: "Enable headless browser control" })),
                 }, { description: "Built-in tool toggles (true=enabled, false=disabled)" })),
             }, { description: "Skills and tool configuration" })),
+            // Per-agent OAuth profile preference. Map of provider → profile-id
+            // (e.g. { "openai-codex": "openai-codex:user@example.com" }).
+            // The downstream Zod schema (PerAgentConfigSchema) is the
+            // canonical format gate via `validateProfileId`; the daemon-side
+            // `agents.update` handler additionally rejects unknown profile IDs
+            // via `OAuthCredentialStore.has()`.
+            oauthProfiles: Type.Optional(Type.Record(Type.String(), Type.String({
+                description: "<provider>:<identity> profile ID. Run `comis auth list` first to discover stored profiles.",
+            }), {
+                description: "OAuth profile preferences per provider (e.g., openai-codex). Each value must match an existing stored profile ID — the daemon rejects nonexistent IDs with a 'not found in store' error.",
+            })),
         }, { description: "Agent configuration for create/update actions" }),
         Type.String({
             description: "Agent configuration as a JSON string (fallback when the LLM stringifies the object). " +
@@ -110,9 +121,9 @@ const VALID_ACTIONS = ["create", "get", "update", "delete", "suspend", "resume",
  * Map flat workspace_profile param to nested workspace.profile config.
  * Mutates config in place.
  *
- * 260428-oyc: precedence is "flat wins" -- when both flat workspace_profile
- * and nested workspace.profile are present, the flat field overwrites the
- * nested one. This matches the existing spread semantics
+ * Precedence is "flat wins" -- when both flat workspace_profile and nested
+ * workspace.profile are present, the flat field overwrites the nested one.
+ * This matches the existing spread semantics
  * (`{...existing, profile}`) and keeps a single deterministic rule. When only
  * nested is present (no `workspace_profile` key), this is a no-op and the
  * nested shape flows through unchanged to the downstream Zod validator.
@@ -139,19 +150,19 @@ function mapWorkspaceProfile(config) {
  * of the `agents_manage.create` tool_result. The freshest, uncached surface
  * the LLM reads on every turn -- pinned here to fix the silent-termination
  * bug where TOOL_GUIDE prescriptive text gets crowded out under high
- * parallel-tool-call load (production session 1a8b0d91 turn 13: 9 sub-agents
- * created in parallel, then a 0-text 0-thinking 0-tool turn).
+ * parallel-tool-call load (e.g. 9 sub-agents created in parallel followed
+ * by a 0-text 0-thinking 0-tool turn).
  *
  * Pure string composition. No I/O, no Result<T,E> needed (per AGENTS.md
  * §2.1: Result is for fallible paths only; this is infallible).
  *
- * Three branches keyed on `inlineWritesResult` (260428-vyf):
+ * Three branches keyed on `inlineWritesResult`:
  *  - BOTH written → SHORT contract: "No further setup needed — agent is
  *    operationally ready". Skips the post-create write() roundtrip.
  *  - PARTIAL (only one of role/identity written) → mixed contract pointing
  *    only at the still-template file with a single "Next required action".
- *  - NEITHER (or write failure / undefined) → existing 260428-sw2 2-step
- *    contract verbatim, telling the LLM to call write() for ROLE.md.
+ *  - NEITHER (or write failure / undefined) → existing 2-step contract
+ *    verbatim, telling the LLM to call write() for ROLE.md.
  *
  * Case B (workspaceDir absent — defensive fallback): shorter form pinning
  * "Customize {agentId}'s workspace ROLE.md and IDENTITY.md before using."
@@ -179,7 +190,7 @@ export function buildCreateContract(agentId, workspaceDir, inlineWritesResult) {
         ].join("\n");
     }
     // NEITHER (no inlineContent supplied, write failure, or undefined): fall
-    // through to the existing 260428-sw2 2-step contract verbatim.
+    // through to the existing 2-step contract verbatim.
     if (workspaceDir !== undefined) {
         return [
             `✓ Agent ${agentId} created at ${workspaceDir}.`,
@@ -222,7 +233,7 @@ function coerceConfig(p) {
  *
  * @param rpcCall - RPC call function for delegating to the daemon backend
  * @param logger - Required structured logger. Used to emit a per-create
- *   INFO log pinning the next-step contract emission (260428-sw2 Layer 1).
+ *   INFO log pinning the next-step contract emission.
  *   Mirrors the gateway-tool required-logger position; no overload-with-
  *   default-logger compat shim (per `feedback_no_backward_compat.md`).
  * @param approvalGate - Optional approval gate for create/delete actions
@@ -260,16 +271,16 @@ export function createAgentsManageTool(rpcCall, logger, approvalGate, callbacks)
                         }
                     }
                 }
-                // 260428-vyf L2 (Path A): strip workspace.role / workspace.identity
-                // from the config payload BEFORE the RPC and forward them as a
-                // separate top-level `inlineContent` parameter. Rationale: the
-                // downstream Zod schema (PerAgentConfigSchema.workspace at
+                // Strip workspace.role / workspace.identity from the config
+                // payload BEFORE the RPC and forward them as a separate top-level
+                // `inlineContent` parameter. Rationale: the downstream Zod schema
+                // (PerAgentConfigSchema.workspace at
                 // packages/core/src/config/schema-agent.ts) is z.strictObject —
                 // unknown keys would trigger Zod `unrecognized_keys` rejection.
                 // role/identity are write-once side-effects (ROLE.md / IDENTITY.md
                 // file writes), NOT durable state — they MUST NOT leak into
-                // config.yaml. Path B (extending Zod schema-agent.ts) was
-                // rejected because it would persist them.
+                // config.yaml. Extending the Zod schema instead would persist
+                // them and was rejected.
                 let inlineContent;
                 if (config && typeof config === "object") {
                     const ws = config.workspace;
@@ -295,11 +306,11 @@ export function createAgentsManageTool(rpcCall, logger, approvalGate, callbacks)
                     const aid = agentId;
                     const workspaceDir = result?.workspaceDir;
                     const inlineWritesResult = result?.inlineWritesResult;
-                    // 260428-sw2 Layer 1 + 260428-vyf Layer 2: emit the next-step
-                    // contract on the freshest, uncached surface the LLM reads each
-                    // turn (the tool_result text). The contract has 3 branches keyed
-                    // on inlineWritesResult (see buildCreateContract). One structured
-                    // INFO log pins this happened.
+                    // Emit the next-step contract on the freshest, uncached surface
+                    // the LLM reads each turn (the tool_result text). The contract
+                    // has 3 branches keyed on inlineWritesResult (see
+                    // buildCreateContract). One structured INFO log pins this
+                    // happened.
                     const contractText = buildCreateContract(aid, workspaceDir, inlineWritesResult);
                     // Distinguish the 3 inline-write outcomes for observability.
                     // "none"    — caller did not supply inlineContent
@@ -311,7 +322,7 @@ export function createAgentsManageTool(rpcCall, logger, approvalGate, callbacks)
                             ? "written"
                             : "failed";
                     logger.info({
-                        module: "skill.agents-manage",
+                        submodule: "skill.agents-manage",
                         action: "create",
                         agentId: aid,
                         workspaceDir: workspaceDir ?? null,

package/node_modules/@comis/skills/dist/builtin/platform/background-tasks-tool.d.ts

@@ -14,13 +14,16 @@ type TaskStatus = "running" | "completed" | "failed" | "cancelled";
 /** Minimal task shape used by this tool. */
 interface TaskInfo {
     id: string;
-    agentId: string;
     toolName: string;
     status: TaskStatus;
     startedAt: number;
     completedAt?: number;
     result?: string;
     error?: string;
+    /** agentId is nested under origin.agentId */
+    origin: {
+        agentId: string;
+    };
 }
 /** Subset of BackgroundTaskManager consumed by this tool. */
 export interface BackgroundTaskManagerLike {